Known vulnerabilities in go (Alpine package)

Vendor: Alpine Linux Development Team
Software: go (Alpine package)
Software CPE: cpe:2.3:o:alpine:go_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting go (Alpine package) go (Alpine package) is affected by 24 known vulnerabilities: 5 high, 12 medium, 7 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50046 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3115		 CWE-78 High
No
No
 1.15.7-r0 26.01.2021 SB2021012714
SB2021012715
SB20210120131
and 10 more
#VU50047 - Incorrect Calculation
CVE-2021-3114		 CWE-682 Medium
No
No
 1.15.7-r0 26.01.2021 SB2021012714
SB2021012715
SB20210120130
and 40 more
#VU48480 - Improper input validation
CVE-2020-28362		 CWE-20 Medium
No
No
 1.15.5-r0 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU48479 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28367		 CWE-94 High
No
No
 1.15.5-r0 17.11.2020 SB2020111715
SB2020111716
SB2020111227
and 17 more
#VU48478 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28366		 CWE-94 High
No
No
 1.15.5-r0 17.11.2020 SB2020111715
SB2020111716
SB2020111226
and 17 more
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553		 CWE-79 Low
No
No
 1.15.2-r0 02.09.2020 SB2020090217
SB2020091020
SB2020091021
and 20 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845		 CWE-835 Medium
No
No
 1.15-r0 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586		 CWE-362 Medium
No
No
 1.13.13-r0, 1.13.14-r0 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more
#VU29673 - Improper Certificate Validation
CVE-2020-7919		 CWE-295 Medium
No
No
 1.13.8-r0, 1.13.10-r0 16.03.2020 SB2020031611
SB2020020725
SB2020020726
and 15 more
#VU22020 - Improper input validation
CVE-2019-17596		 CWE-20 Medium
No
No
 1.13.8-r0, 1.13.10-r0 21.10.2019 SB2019102201
SB2019102202
SB2019102107
and 14 more
#VU21409 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16276		 CWE-444 Medium
No
No
 1.13.1-r0 29.09.2019 SB2019092910
SB2019092911
SB2019111801
and 13 more
#VU20301 - Improper input validation
CVE-2019-14809		 CWE-20 Low
No
No
 1.12.8-r0 19.08.2019 SB2019081902
SB2019082502
SB2019082504
and 13 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 1.12.8-r0 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 1.12.8-r0 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more
#VU17245 - Resource exhaustion
CVE-2019-6486		 CWE-400 Low
No
No
 1.10.8-r0, 1.11.5-r0 24.01.2019 SB2019012802
SB2019012425
SB2019012426
and 12 more
#VU12162 - Command injection
CVE-2018-6574		 CWE-77 Low
Available
No
 1.9.4-r0 25.04.2018 SB2018020920
SB2018020921
SB2018030716
and 8 more
#VU12161 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-15042		 CWE-300 Low
No
No
 1.8.4-r0 25.04.2018 SB2017102306
SB2017110222
SB2018041050
and 6 more
#VU12160 - Command injection
CVE-2017-15041		 CWE-77 Low
No
No
 1.8.4-r0 25.04.2018 SB2017101217
SB2017101218
SB2017102306
and 8 more
#VU33632 - Improper Access Control
CVE-2016-5386		 CWE-284 High
No
No
 1.6.3-r0 19.07.2016 SB2016072018
SB2016081709
SB2023022232
and 6 more
#VU32310 - Improper input validation
CVE-2016-3959		 CWE-20 Medium
No
No
 1.5.4-r0 23.05.2016 SB2016052303
SB2016042604
SB2016042114
and 4 more


Showing elements 1 - 20 out of 24